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Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 
A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a 
foreign country or in public use or on sale in this country, more than one year 
prior to the date of application for patent in the United States. 



Claims 1-14 are rejected under 35 U.S.C 102(b) as being unpatentable over 
Shwed et al (US Pat 5,835,726). 

Consider Claim 1, Shwed et al discloses an access-controlling method for 
controlling access of a terminal of an outside network to a server of an inside network 
using a repeater (Shwed et al, Col 2, Lines 62-67, Col 3 Lines 1-7, 8-29, Col 6 Line 18), 
the inside network and the outside network being relayed by the repeater (Shwed et al, 
Col 2, Lines 62-67, Col 3 Lines 1-7, 8-29, Col 6 Line 18), the access-controlling method 
comprising: permitting transmission of packets sent by the terminal to the server under 
limited conditions (Shwed et al, Col 2, Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4, Lines 
22-43, Col 5, Lines 48-54); changing conditions to generate changed conditions that 
define packet transmission from the terminal to the server, when the server 
acknowledges connection between the terminal and the server according to the packets 



* 
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sent under the limited conditions (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, 
Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54); and controlling the packet 
transmission from the terminal to the server under the changed conditions. (Shwed et 
al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 
Lines 39-54). Shwed et al clearly shows that a computer device or a gateway can 
function as a repeater which can be configured for controlling access between external 
terminal/device outside the internal network to ensure reliable and secure 
communications can occur. 

Consider Claim 2, Shwed et al discloses an access-controlling method as 
defined in claim 1, wherein the limited conditions (Shwed et al, Col 2 Lines 62-67, Col 3 
Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54) limit 
bandwidth of the packet transmission from the terminal to the server within a 
predetermined range (Shwed et al, Col 6 Lines 62-67, Col 7 Lines 1-4, Col 17 Lines 55- 
57). Shwed et al clearly shows on bandwidth can be controlled based on rules and 
limits placed in the network device. 

Consider Claim 3, Shwed et al discloses access-controlling method as defined in 
claim 1, wherein the packets sent under the limited conditions include authentication 
information to be sent to the server (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8- 
29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54). Shwed et al clearly shows 
that a computer device or a gateway can function as a repeater which can be 
configured for controlling access between external terminal/device outside the internal 
network to ensure reliable and secure communications can occur. 
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Consider Claim 4, Shwed et al discloses access-controlling method as defined in 
claim 1 , wherein said changing conditions further comprises changing conditions of a 
flow that is defined using an address of the terminal, an port number of the terminal, an 
address of the server, and a port number of the server (Shwed et al, Col 6 Lines 62-67, 
Col 7 Lines 1-4, Col 17 Lines 55-57, Col 7 Lines 17-32). Shwed et al clearly shows 
ports and address is used when communicated between network devices. 

Consider Claim 5, Shwed et al discloses access-controlling method for 
controlling access of a terminal of an outside network to a server of an inside network 
using a repeater (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22- 
43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 6 Lines 18), the inside network and the 
outside network being relayed by the repeater (Shwed et al, Col 2 Lines 62-67, Col 3 
Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 6 Lines 
18), the access-controlling method comprising: receiving encrypted packets from the 
terminal; decoding the encrypted packets; and notifying access control information 
concerning the encrypted packets to the repeater (Shwed et al, Col 2 Lines 62-67, Col 3 
Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 6 Lines 
18). Shwed et al clearly shows that a computer device or a gateway can function as a 
repeater which can be configured for controlling access between external 
terminal/device outside the internal network to ensure reliable and secure 
communications can occur. 
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Consider Claim 6, Shwed et al discloses access-controlling method as defined in 
claim 5, wherein the access control information includes information defining a flow 
concerning the encrypted packets (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8- 
29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 6 Lines 18). Shwed et 
al clearly shows on the use of encrypting packets when transmission is conducted 
between network devices located in external and internal network environments. 

Consider Claim 7, Shwed et al discloses access-controlling method as defined in 
claim 5, wherein the access control information includes information of an address of 
the terminal, a port number of the terminal, an address of the server, and a port number 
of the server (Shwed et al, Col 6 Lines 62-67, Col 7 Lines 1-4, Col 17 Lines 55-57, Col 7 
Lines 17-32). Shwed et al clearly shows ports and address is used when 
communicated between network devices. 

Consider Claim 8, Shwed et al discloses access-controlling method as defined in 
claim 1, further comprising: storing access control information in the server; and storing 
the access control information in the repeater, wherein, when the server changes the 
access control information, the server notifies the repeater that the access control 
information has changed (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 
Lines 22-43, Col 5 Lines 48-54, 55-67 , Col 6 Lines 1-27 , 39-54, Col 6 Lines 18). Shwed 
et al clearly shows on changes to access control in the repeater/network 
device/gateway are addressed by the server. 
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Consider Claim 9, Shwed et al discloses a repeater for controlling access of a 
terminal of an outside network to a server of an inside network (Shwed et al, Col 2 Lines 
62-67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, 
Col 11 Lines 1-5 ). and for relaying the inside network and the outside network, the 
repeater comprising: a first communication unit operable to be connected to the outside 
network (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 
Lines 48-54, Col 6 Lines 39-54, Col 11 Lines 1-5) : a second communication unit 
operable to be connected to the inside network (Shwed et al, Col 2 Lines 62-67, Col 3 
Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54); a storing unit 
operable to store information correlatively describing a flow concerning packets 
transmitted via the first communication unit (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 
1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, 55-67 . Col 6 Lines 1^27, 39-54, Col 6 
Lines 18, Col 11 Lines 1-5) and the second communication unit, a bandwidth threshold 
value of the flow (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22- 
43, Col 5 Lines 48-54, Col 6 Lines 39-54), and a measured bandwidth value of the flow 
(Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 
48-54, Col 6 Lines 39-54, Col 11 Lines 1-5 ): a classifying unit operable to classify a flow 
of a packet according to the information defining the flow stored in said storing unit to 
generate a classified flow (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 
Lines 22-43, Col 5 Lines 48-54, 55-67 . Col 6 Lines 1-27 . 39-54, Col 6 Lines 18, Col 11 
Lines 1-5 ): a measuring unit operable to measure a bandwidth of the classified flow to 
generate a measured value (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 
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4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 11 Lines 1-5) , and further 
operable to store the measured value into said storing unit Shwed et al, Col 2 Lines 62- 
67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 
11 Lines 1-5 ): a judging unit operable to compare the measured bandwidth of the 
classified flow with a bandwidth threshold value of the classified flow Shwed et al, Col 2 
Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 
39-54, Col 11 Lines 1-5 ), to judge whether or not transmission of the flow is 
acknowledged; and a bandwidth control unit operable to transmit packets belonging to a 
flow that is judged to be acknowledged by said judging unit Shwed et al, Col 2 Lines 62- 
67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 
11 Lines 1-5 ), via at least one of the first communication unit and the second 
communication unit (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 Lines 
22-43, Col 5 Lines 48-54, Col 6 Lines '39-54, Col 11 Lines 1-5) . Shwed et al clearly 
shows that a computer device or a gateway can function as a repeater which can be 
configured for controlling access between external terminal/device outside the internal 
network to ensure reliable, bandwidth controlled and secure communications can occur. 

Consider Claim 10, Shwed et al discloses repeater as defined in claim 9, 
wherein the bandwidth threshold value of the flow stored in said storing unit is set a 
value that limits transmission within a limited range (Shwed et al, Col 2 Lines 62-67, Col 
3 Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 1 1 Lines 
1-5 ), until the server acknowledges connection between the terminal and the server, 
and wherein, once the server has acknowledged the connection between the terminal 
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and the server (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22- 
43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 11 Lines 1-5) . the bandwidth threshold 
value of the flow stored in said storing unit is set another value that limits the 
transmission more loosely than the limited range (Shwed etal, Col 2 Lines 62-67, Col 3 
Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 1 1 Lines 
1-5) . Shwed et al clearly shows that a computer device or a gateway can function as a 
repeater which can be configured for controlling access between external 
terminal/device outside the internal network to ensure reliable, bandwidth controlled and 
secure communications can occur. 

Consider Claim 11, Shwed et al discloses a server for controlling access with a 
terminal of an outside network, the server connecting an inside network, the inside 
network and the outside network being relayed by a repeater (Shwed et al, Col 2 Lines 
62-67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, 
Col 11 Lines 1-5) . the server comprising: a communication unit operable to be 
connected to the inside network (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, 
Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 11 Lines 1-5 ): a storing 
unit operable to store information correlatively describing a flow concerning packets 
transmitted via the communication unit (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 
8-29, Col 4,Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 11 Lines 1-5 ). a 
bandwidth threshold value of the flow, and a measured bandwidth value of the flow 
(Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 
48-54, Col 6 Lines 39-54, Col 11 Lines 1-5) : a classifying unit operable to classify a flow 
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of a packet according to the information defining the flow stored in said storing unit to 
generate a classified flow (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 
Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 11 Lines 1-5) : a measuring unit 
operable to measure a bandwidth of the classified flow to generate a measured value 
(Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 
48-54, Col 6 Lines 39-54, Col 11 Lines 1-5) , and further operable to store the measured 
value into said storing unit (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 
Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 11 Lines 1-5) : a judging unit 
operable to compare the measured bandwidth of the classified flow with a bandwidth 
threshold value of the classified flow (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8- 
29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 11 Lines 1-5 ). to judge 
whether or not transmission of the flow is acknowledged; and a bandwidth control unit 
operable to transmit packets belonging to a flow that is judged to be acknowledged by 
said judging unit, via the communication unit (Shwed et al, Col 2 Lines 62-67, Col 3 
Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 1 1 Lines 
1-5 ). Shwed et al clearly shows that a computer device or a gateway can function as a 
server which can be configured for controlling access between external terminal/device 
outside the internal network to ensure reliable, bandwidth controlled and secure 
communications can occur. 

Consider Claim 12, Shwed et al discloses a server as defined in claim 1 1 , 
wherein a value that limits transmission within a limited range is set to the bandwidth 
threshold value of the flow stored in said storing unit (Shwed et al, Col 2 Lines 62-67, 
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Col 3 Lines 1-7, 8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 11 
Lines 1-5 ), until said judging unit judges that transmission between the terminal and the 
server is acknowledged, and wherein (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 
8-29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 11 Lines 1-5) , when 
said judging unit judges that transmission between the terminal and the server is 
acknowledged (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22- 
43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 11 Lines 1-5 ), another value that limits the 
transmission more loosely than the limited range is set to the bandwidth threshold value 
of the flow stored in said storing unit (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8- 
29, Col 4 Lines 22-43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 11 Lines 1-5 ). Shwed 
et al clearly shows that a computer device or a gateway can function as a server which 
can be configured for controlling access between external terminal/device outside the 
internal network to ensure reliable, bandwidth controlled and secure communications 
can occur. 

Consider Claim 13, Shwed et al discloses a server as defined in claim 11, 
wherein, when the information stored in said storing unit is changed, said 
communication unit notifies the repeater that the information stored in said storing unit is 
changed (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22-43, Col 
5 Lines 48-54, 55-67 , Col 6 Lines 1^27, 39-54, Col 6 Lines 18). Shwed et al clearly 
shows on how the changes to access control in the storing unit in the repeater/network 
device/gateway/server are addressed by the server. 
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Consider Claim 14, Shwed et al discloses server as defined in claim 1 1 , further 
comprising an encryption unit operable to decode an encrypted packet, wherein said 
communication unit notifies access control information concerning the encrypted packet 
to the repeater (Shwed et al, Col 2 Lines 62-67, Col 3 Lines 1-7, 8-29, Col 4 Lines 22- 
43, Col 5 Lines 48-54, Col 6 Lines 39-54, Col 6 Lines 18). Shwed et al clearly shows 
that a computer device or a gateway can function as a repeater which can be 
configured for controlling access between external terminal/device outside the internal 
network to ensure reliable and secure communications can occur. 
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Conclusion 



Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Anish Sikri whose telephone number is 571-270-1783. 
The examiner can normally be reached on 8am - 5pm Monday - Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, David Wiley can be reached on 571-272-3923. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Anish Sikri 
a.s. 

August 27, 2007 
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